Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/15073b81-c08c-3791-939b-cb3a8d58fcb3.roa
File:                     15073b81-c08c-3791-939b-cb3a8d58fcb3.roa (raw, json)
Hash identifier:          5r8NVhmxfAKtHmA2IIrLTkjM3+HKX7g/I5rkvkzzztg=
Subject key identifier:   33:1C:25:3B:97:6A:0E:A8:A0:12:3B:F8:C6:EB:53:5A:5E:27:4D:76
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E89741DD300A6350FF700
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/15073b81-c08c-3791-939b-cb3a8d58fcb3.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     6559
IP address blocks:        204.84.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:89:74:1d:d3:00:a6:35:0f:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=44e7e75f-48de-44ec-bf40-ff0838aa12f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:b2:9d:92:da:15:69:d1:f5:7a:0d:74:fa:
                    53:19:e2:b8:a3:3e:8a:ed:95:c9:7b:50:8f:4a:fa:
                    96:60:81:3a:54:f6:84:48:e2:46:72:0e:fa:71:69:
                    01:7c:01:61:d5:32:eb:56:9d:a0:a5:36:47:be:13:
                    6c:a0:9d:11:75:12:e5:a3:23:cf:7b:99:af:82:28:
                    29:5b:54:04:2e:2a:2a:23:98:38:2a:49:a1:c7:35:
                    48:d8:98:9e:55:21:4d:c8:32:05:6d:20:05:00:7b:
                    96:f6:f4:91:e2:75:70:67:31:b3:12:7c:55:31:96:
                    fa:4d:04:5c:30:84:f8:3a:3f:01:13:26:15:66:b1:
                    3c:d3:60:cb:f7:b9:2e:07:0e:17:a5:aa:49:a1:89:
                    b8:7a:cb:de:84:84:ea:d6:db:3d:90:7c:ec:4a:f3:
                    8a:d4:94:87:ae:b1:dc:e0:b5:ab:c2:f0:55:ca:07:
                    75:6d:8c:c7:fa:8e:cd:f3:17:79:ff:72:96:7b:65:
                    a7:99:cf:49:07:19:e8:2b:f8:6c:9f:16:b8:64:cb:
                    3d:24:0b:23:56:a8:88:0b:7c:ac:f4:d9:39:25:53:
                    1c:b3:f5:84:34:d8:0f:d5:15:d3:d5:a2:e5:2e:e2:
                    7d:0f:0a:80:74:3c:2f:09:0a:21:ac:01:00:81:bd:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1C:25:3B:97:6A:0E:A8:A0:12:3B:F8:C6:EB:53:5A:5E:27:4D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/15073b81-c08c-3791-939b-cb3a8d58fcb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c0:17:81:64:78:91:ac:af:c9:ce:57:41:1c:72:79:40:87:
         ce:8d:16:a3:69:1a:38:c0:e0:04:be:a4:45:74:90:79:b5:b7:
         33:86:4e:3d:56:20:42:b8:67:d4:e5:40:91:ac:72:7a:62:b3:
         b6:e2:03:e5:c1:14:1d:82:34:71:0f:40:a8:e1:29:40:4a:50:
         ab:49:a6:a2:1c:cb:f8:6b:cc:c4:b8:d9:ad:80:f4:46:41:1f:
         9b:67:f2:c0:87:be:a7:6c:fd:b9:a4:49:be:a8:59:5c:a4:1e:
         30:8b:2e:c2:3f:02:7a:b0:c4:4a:16:b7:be:5b:34:6b:bc:e3:
         52:c0:1e:0e:05:37:19:82:91:84:11:4d:12:52:ca:69:73:cc:
         21:27:51:35:58:3a:30:49:e5:1d:0a:e2:8e:17:87:cb:25:26:
         31:91:9a:75:91:a9:dd:17:59:97:1d:3a:5f:8c:9e:ad:6e:1c:
         21:e1:d8:80:82:78:8a:c5:08:3c:4c:84:6b:b3:9b:51:62:35:
         7a:89:02:b3:15:b0:e2:74:63:db:98:2e:be:c8:b7:50:62:7c:
         ab:d9:5f:8e:91:2a:a8:09:08:16:0c:3d:7b:5d:ab:18:36:28:
         fe:8e:ef:a1:77:14:4b:ad:5b:6c:f7:53:7b:bf:37:61:5d:56:
         8d:e9:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:48:49 2025 by rpki-client